Privacy Policy
Effective date: 2026-09-08
Data We Collect
- Account data: email address, display name, password hash
- Service data: alert preferences, signals enabled, channels enabled
- Identity data: linked OAuth/Telegram identifiers, and β for Telegram β the profile Telegram sends with every message: first and last name, @username, the language your Telegram app is set to, and whether the account has Telegram Premium. We do not receive, and cannot request, your country or your phone number.
- Payment metadata: subscription tier, payment dates (financial details handled by our payment processors)
- Technical data: IP address (recorded only at consent and login), user agent
- Activity data: alert delivery log
- Error diagnostics: when the app fails, a technical report (page URL, browser, stack trace, your user id) goes to an error tracker hosted on our own server; it is not shared with a third party
- Telegram bot data: if you talk to one of our Telegram bots without holding an account with us, we keep the same Telegram profile above against your Telegram user id, so we can answer you in your language and identify you if you buy. It is kept for as long as the bot is in use and removed on request β write to us from the Telegram account in question.
Why We Collect
- Service delivery (contract performance): we need your account info to provide alerts
- Billing (contract performance): subscription management requires payment data
- Abuse prevention (legitimate interest): IP and activity logs help identify abuse
- Marketing (consent only): we do not use your data for marketing without explicit opt-in
Third Parties
- NOWPayments (cryptocurrency payment processing)
- Telegram (Telegram Stars payments and bot delivery)
- Resend (email delivery)
- Cloudflare (DNS, DDoS protection)
- Hetzner (server hosting, EU data centers)
- Optional analytics providers (only if you opt-in via cookie consent)
Data Retention
- Account data: until you delete your account
- Payment records: 7 years (legal requirement for financial records). PII in payment records is redacted upon account deletion; only aggregate financial data remains.
- Alert logs: until account deletion, then erased
Your Rights (GDPR / CCPA)
- Access: download all your data via Account β Export My Data
- Rectification: edit account details in your profile
- Erasure: delete your account (subject to legal retention of payment records)
- Portability: the JSON export is portable to other services
- Objection: opt-out of analytics via cookie banner; contact us for objections to legitimate-interest processing
- CCPA "Do Not Sell": we do not sell your personal data
Cookie Use
See Cookie Policy.
Contact
For privacy questions or to exercise your rights: [email protected]